CVE-2026-54417 Integer Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoS

An integer overflow in the mtarnext function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service uncontrolled CPU consumption / infinite loop via a crafted tar archive. mtarnext computes the offset to the next record as rounduph.size, 512 +...

CVE-2026-54417

CVE-2026-54417 affects rxi/microtar 0.1.0: mtar_next() uses 32‑bit arithmetic to compute the next record offset, and when header size is a multiple of 512 in 0xFFFFFC01–0xFFFFFE00, the offset addition wraps to 0. This causes mtar_next() to seek the current position instead of advancing, so mtar_f...

EUVD-2026-37704

An integer overflow in the mtarnext function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service uncontrolled CPU consumption / infinite loop via a crafted tar archive. mtarnext computes the offset to the next record as rounduph.size, 512 +...